Threat actors
320 actors tracked across public CTI reporting. Search by name or alias; sort by activity. Shown on a 7-day delay.
sort
Thegentlemen(ArmCorp, Hastalamuerte, Phantom Mantis)
649 reports▲34%Qilin(Agenda, Pestilent Mantis, Qilin)
630 reports▼21%INC Ransom(INC Ransom, INC Ransom Group, INC ransomware)
207 reports▲41%Akira(Akira v2)
205 reports▼9%Dragonforce(Hackledorb)
173 reports▲56%ShinyHunters(GRUB1, GnosticPlayers, Icarus)
168 reports▲9%LockBit(ALPHV, LockBit, LockBit 3.0)
148 reports▼11%Clop(CL0P, CLOP, CLOPcrawford)
145 reports▲314%Krybit
136 reports▼73%Safepay
116 reports▲92%N0n
111 reportsNEWDeadlock
111 reports▲20%Nightspire
105 reports▲311%Play(PlayCrypt)
99 reports▲127%Settra
89 reports▼50%Storm
87 reports±0%Nova
74 reports·Direwolf
68 reports▼95%Everest(Everest ransomware gang)
67 reports▲82%TeamPCP(@pcpcats, Altered Spider, BulkDMT)
60 reports▼88%Silent Ransom Group(Chatty Spider, Luna Moth, SRG)
56 reports▼11%Orova
54 reports▲12%Chaos
52 reports▼69%Genesis
52 reports±0%Wallstreet
51 reports▲240%Auditteam
50 reports▼40%Pear(Pure Extraction and Ransom)
47 reports▼17%Anubis(Sphinx)
46 reports±0%Emperador
44 reports▲35%Panzer
44 reports▼32%Global secret group
44 reports▼60%Majinahanashi
43 reports▲200%Rhysida
42 reports▲7%Aurora(Aur0ra)
42 reports±0%Coinbasecartel
42 reports▼100%Payload
41 reports▲500%Spacebears
39 reports▼33%Cmdorganization
39 reports·Medusalocker
37 reports▼18%Crpxo
37 reports·Braincipher
35 reports▼9%Interlock(GOLD EMBRACE, Hive0163, KongTuke)
33 reports▲333%Scattered Spider(0ktapus, 0sect, ALPHV)
33 reportsNEWDark project
32 reports▼70%Booba(Frag)
32 reports▲133%APT28(APT28, BlueDelta, Fancy Bear)
31 reports▼80%Shadowbyt3$
31 reports▼100%M3rx
30 reports▲600%Stormous
29 reports·L group
28 reports▼100%Metaencryptor
27 reports▼31%Threeam
27 reports▲350%Worldleaks(Hunters International, Hunters International spin-off)
27 reports·Ransomhouse
26 reports±0%Titan
26 reports▼78%Zawoo
25 reports▼68%Vexy
24 reports▼29%Gunra(Golden Community)
24 reports▼100%Exfilsquad
24 reports·Lamashtu
23 reportsNEWSalt Typhoon(Earth Estries, Salt Typhoon, UAT-9244)
22 reports▼60%Contagious Interview(Fake Font, Famous Chollima, HexagonalRodent)
21 reports▲400%Kairos
21 reports▲100%APT29(APT29, BlueBravo, Cozy Bear)
21 reports▼75%Sandworm(APT34, APT44, HEXANE)
21 reports▼60%Apt73(Wolves of Turan)
21 reports·Eclipse
20 reports▲11%Bravox
20 reports▲300%Arcusmedia
20 reports▲75%Section9
20 reports·Iah6477
19 reports▲38%Void Blizzard(CL-STA-1114, Laundry Bear, TA488)
19 reports▼100%Ailock
19 reports▼100%MuddyWater(Boggy Serpens, Mango Sandstorm, MuddyWater)
19 reports·Blacknevas(CryptoRex, Pear)
18 reports▼50%Lazarus Group(APT38, Andariel, Bureau 121)
18 reports▲100%Insomnia
18 reports▼88%Icarus(mr bean)
18 reports·Helix(UNC6661, UNC6671)
17 reports▲200%Payoutsking
17 reports▲33%Kimsuky(APT43, Black Banshee, Cerium)
16 reports▼50%BlueNoroff(APT38, Alluring Pisces, BlueNoroff)
16 reportsNEWDoommageddon
16 reports▲67%The Seven Deadly Sins
15 reportsNEWTermite
15 reports▲500%JADEPUFFER(Storm-3168)
15 reports▲200%Lazarus(APT38, HIDDEN COBRA, Lazarus Group)
15 reports▼100%Turla(ATG26, Blue Python, Iron Hunter)
15 reports·Black x
14 reports±0%Barracuda
14 reports▲25%Orion
14 reports·Mustang Panda(Bronze President, HIVE0154, Mustang Panda)
13 reports±0%Killsec(Kill Security Ransomware Group)
13 reports▲500%Kazu
13 reports▼100%Nimbus Manticore(GalaxyGato, Imperial Kitten, Iranian Dream Job)
13 reports▼100%Hyflock
12 reportsNEWNoName057(16)(NoName, Russian Cyber Army)
12 reportsNEWEvilTokens(ARToken)
12 reportsNEWHandala Hack Team(Banished Kitten, Cobalt Mystique, HPRF)
12 reports±0%Medusa(Medusa, Storm-1175)
12 reports▼100%showing 100 of 320